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REMARKS 

Applicants respectfiilly traverse and request reconsideration. 

As a preliminary matter, Applicants' attorney wishes to thank Examiner Meislahn for the 
courtesies extended during the telephone conference of June 12, 2003. In response to these 
discussions. Applicants beUeve the above amendments and foUowing remarks support allowance 
of all the claims. 

As an additional matter. Claims 4. 14 and 28 have been included in their independent 
claims since these claims do not appear to be rejected and since they distinguish over tiie 
references of record m addition to the original language of the claims. 

Claims M, 6, 8-18, 20-24 and 26-30 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Lewis in view of Ellison. Applicants respectfuUy reassert the remarks made in 
previous Office Actions with respect to these references. In addition, as discussed during the 
telephone conference, AppUcants' Claim 1. for example, is directed to among other things, 
selectable digital signature expiry data and a multi-client manager unit that provides on a per 
cUent basis, selectable digital signature expiry data. In addition, the clahns require that a digital 
signature key pair update request has been received fiom a cUent unit and also that a new digital 
signature key pair is received from a client unit in response to the digital signature key pair 
update request. Multi-client management unit then associates the stored selected expiry data to 
create a new digital signature certificate containing the selected pubUc key expiry data for the 
client that generated the digital signature key pair update request. 

Lewis teaches an opposite approach. AppUcants again reiterate that the Lewis reference 
teaches a completely different key replacement technique and also teaches that a key server 
accepts a key replacement command from a central pubUc key controller which decides when to 
replace the active pubUc key (CoL 7, lines 29-33). Hence, the cUent unit in Lewis does not 
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generate keys nor update key requests. As taught by Lewis, it is the key server that sends out a 
key replaccmeat message containing the replacement key and a hash of its own replacement key. 
In contrast. Applicants claim that a multi-client manager unit detennines whether digital 
signature key pair update request has been received and then receives the new digital signature 
key pair from the client. A multi manager unit then associates the selected expiry data with ifae 
new digital signature key pair to affect the transition from an old signature key pair to a new 
digital signature key pair. This is distinctly different from Lewis smce the user node of Lewis 
does not determine whether digital signature key pair update is required, nor does it generate 
digital signature key pairs. As such, the claims are beUeved to be in condition for aUowance. 

As to the dependent claims, these claims add additional novel and non-obvious subject 
matter as pointed out in AppKcants previous responses to OfBce Actions, including, but not 
limited to the Response fUed November 8, 2002 incorporated herein by reference. AppKcants 
also incorporate by reference the other remarks with respect to dependent claims. 

Claims 5, 19. 25 and 27-29 stand rejected under 35 U.S.C. § 103(a) as being unpatentable 
over Lewis and Ellison and in view of Applicants admitted prior art Claim 7 stands rejected 
under 35 U.S.C. §103(a) as being unpatentable over Lewis and Ellison as appUed to claim 1 . 
Applicants respectfully reassert the remarks made above with respect to above claims 1, 14 and 
21. 

As to claim 5 for example, the Office Action takes official note that fixed length renewal 
periods are old and well known. The Office Action then concludes that it would have been 
obvious to set key update periods that are based on a fixed number of days and a percentage of a 
key's lifetime. AppUcants respectfully submit that this is a mischaracterization of Applicants' 
claimed invention. Applicants note that conventional public key cryptographic systems typically 
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have a fixed default period that is the same for all clients on the system. Hie defeult period is 
fixed and it is typically not adjustable by a multi-client manager or certification authority as 
claimed. However, AppUcants claim, inter alia, initiating, by a client unit, digital signature key 
pair update requests based on whether differences between a cmient date and a digital signature 
private key Ufetime end date is less than an absolute predetermined period of time, and based on 
whether the difference between a current date and a digital signature private key lifetime end 
date is less than a predeteimined percentage of a total duration of a digital signature private key 
lifetime when the digital signature private key lifetune was selectable on a per client basis 
through a multi^Hent manager unit No such digital key pair update request or basis for such a 
request is taught or suggested in any of the references cited. It is Applicants' own disclosure 
which teaches such an invention which provides many advantages over conventional systems. 
Applicants respectfully request a showing of a teaching and references of such a digital signature 
key pair update request and the basis for initiating such a request as claimed. 

Claims 1-4, 6. 8-18, 20-24 and 26-30 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over U.S. Patent No. 6,003,014 (Lee et al) in view of Ellison. This is a new 
rejection of the claims. 

Lee is dkected to a method and apparatus for acquiring access using a smart card and in 
particular, attempts to solve a problem unrelated to Applicants claimed invention. For example, 
as Lee notes in the "Background of the Invention" section of his patent, Lee is directed to aiding 
transit passengers to gain access to transportation usmg smart cards by implementing an access 
system using an "open" stored value card system. The smart cards described in the Lee 
reference contain mformation representing, for example, money to allow the holder of the card to 
pay for the cost of transportation in public transportation settings. Accordingly, Applicants 
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respectfully submit that one of ordinary skill in the art would not be motivated to apply the 
teachings of Lee since it is directed to a completely different problem. Applicants claim a 
system and method for providing updated digital signature key pairs to a plurality of clients in a 
public key system. 

In any event, for argument's sake. Applicants note that the Office Action has cited 
Columns 1 0 and 1 1 for aUegedly teaching all of the claimed subject matter except that expiiy 
data is selectable. ElUson has been cited for teaching setting public key validity periods 
according to risk management. 

Applicants respectfully submit that teachings of the references do not render Applicants' 
claims obvious. For example, as to the independent claims, these claims require, among other 
things, that the system must update digital signature key pairs to affect a transition from an old 
digital signature key pair to a new digital signature key pair. The claims require that a digital 
signature key pair update request be generated and received. The Lee reference is silent as to a 
digital signature key pair update scheme and does not appear to teach or suggest, among other 
things, determining whether digital signature key pair update request has been received from a 
cUent unit or receiving a new digital signature key pair from a client unit in response to the 
digital signature key pair update request. Since the references are silent as to such digital 
signature key pair update request, these claims are in condition for allowance. 

In addition, the Office Action attempts to equate the ♦Issuing bank" with AppUcants 
claimed "cUent unit." As noted above, Lee does not teach, among other things, that the issuing 
bank sends a digital signature key pair update request Moreover, Lee merely describes a 
conventional certification authority hierarchy wherein the issuing bank serves as one certificate 
authority and a higher order certificate authority referred to as "the certificate authority" 
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generates an issuer certificate for the i$5uin8 bank. The issuing bank serves as a card issuer by 
generating a card certificate using a card pubUc key pair and the issuing bank's secret key. (See 
Col. 10, lines 49-65). There is a discussion in the cited reference of how an issuing bank gets 
any updated key pairs or which entity determines whether a expiry period for digital signature 
key pau: has occurred. Accordingly, the claims arc in condition for allowance. In addition, the 
Lee reference is not directed to a digital signature key pair update mechanism as required by the 
claims. As noted in previous OfBce Action, the Ellison reference is also silent as to updating 
digital signature key pairs. Since none of the references teach the required claim limitations, 
Applicants respectfully submit that the claims are in condition for allowance. 

Claims 5. 19, 25 and 27-29 stand rejected under 35 U.S.C. § 103(a) as being unpatentable 
over Lewis and Ellison and further in view of AppUcants' admitted prior art. Applicants 
respectfully reassert the remarks made above with respect to the Lee reference and as such these 
claims are also in condition for allowance. In addition, the references neither teach nor suggest 
the determination of a digital signature private key lifetime end date and creation date upon a 
user log in to the public key system, llie references are silent as to such a teaching. In addition, 
none of the references or AppUcants' prior art teaches that a cUent unit initiates a key pair update 
request based on ^^*ether the difference between a current date and a digital signature private 
key lifetime end date that was provided by a multi-cUent unit that provided selectable digital 
signature private key selection based upon the periods of times set forth in the claims. 
Accordingly, these clahns are also believed to be in condition for aUowance. 
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Applicants respectfully submit that the claims are in condition for allowance and a Notice 
of Allowance is respectfully soUcited. The Examiner is invited to contact the below-Ksted 
attorney if the Examiner believes that a conference would expedite the prosecution of the instant 
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